Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/77ef1d44bfbf90c0fa1161bf6eabdf786fac1c05.roa
File:                     77ef1d44bfbf90c0fa1161bf6eabdf786fac1c05.roa (raw, json)
Hash identifier:          +NN6ZkB80rAFW9jUPRtRoRTJM230q21PMQRLMxfs8Fk=
Subject key identifier:   A9:90:9E:08:F9:E1:2D:13:16:97:62:F4:29:17:F8:E9:57:82:8A:C1
Certificate issuer:       /CN=ab8a0b112e65d5e4030b0990fd668c531efaf401
Certificate serial:       1431EB
Authority key identifier: 38:A6:6B:A0:54:46:AD:48:4C:9F:91:15:08:CC:6D:CE:11:A9:7E:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab8a0b112e65d5e4030b0990fd668c531efaf401.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/77ef1d44bfbf90c0fa1161bf6eabdf786fac1c05.roa
Signing time:             Thu 03 Aug 2023 07:04:27 +0000
ROA not before:           Wed 02 Aug 2023 07:04:27 +0000
ROA not after:            Sun 03 Aug 2025 07:04:27 +0000
asID:                     271809
IP address blocks:        2803:cd90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323499 (0x1431eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8a0b112e65d5e4030b0990fd668c531efaf401
        Validity
            Not Before: Aug  2 07:04:27 2023 GMT
            Not After : Aug  3 07:04:27 2025 GMT
        Subject: CN=77ef1d44bfbf90c0fa1161bf6eabdf786fac1c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:04:af:f6:d9:a6:52:a1:44:7d:b8:45:12:
                    6d:1f:4e:f8:84:b2:a4:86:f3:33:4e:7d:8c:36:c1:
                    43:7c:ef:0c:11:4d:e4:50:07:3b:16:6a:19:56:9b:
                    0d:9d:2b:09:b0:f2:cd:83:4f:03:1e:58:f0:60:8e:
                    5f:b7:82:e0:fb:06:17:43:ed:9c:0e:65:15:19:99:
                    5c:31:3c:e5:20:59:bd:a5:2e:8f:9e:aa:5d:0a:20:
                    3a:5f:f8:3c:a5:19:db:18:95:86:d9:2c:5a:c9:0e:
                    0c:32:24:7e:5d:89:18:24:da:1f:27:db:94:70:58:
                    42:87:a4:e6:3b:6f:9e:28:60:5b:9d:5e:ba:fe:aa:
                    10:7f:14:12:88:10:85:51:fb:6c:6e:5d:5c:cb:d0:
                    d2:22:c1:4e:ae:cb:2f:7e:b9:33:ba:1b:9d:3d:3f:
                    5c:1b:25:e2:f2:4f:e3:94:46:9a:25:4a:d6:56:a5:
                    f1:ea:47:92:1f:1d:c6:7d:8f:a1:d2:8d:8c:ec:71:
                    5e:77:37:23:b0:68:0e:af:ac:ce:21:85:7f:c7:36:
                    1d:c0:8c:43:f7:47:1d:36:ab:f9:d2:56:20:23:e2:
                    f0:e4:7f:7b:90:ac:19:a3:ca:6a:90:11:ce:46:4e:
                    c4:7e:1a:c8:78:7f:35:76:e9:46:be:27:41:54:3f:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:90:9E:08:F9:E1:2D:13:16:97:62:F4:29:17:F8:E9:57:82:8A:C1
            X509v3 Authority Key Identifier:
                keyid:38:A6:6B:A0:54:46:AD:48:4C:9F:91:15:08:CC:6D:CE:11:A9:7E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab8a0b112e65d5e4030b0990fd668c531efaf401.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/77ef1d44bfbf90c0fa1161bf6eabdf786fac1c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edf02981-1357-4daa-8149-083dde7bb009/ab8a0b112e65d5e4030b0990fd668c531efaf401.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd90::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:81:53:ba:8e:69:94:2a:02:02:7d:93:91:63:0e:05:e9:d8:
         96:e4:a7:3e:12:59:f2:fd:d4:66:15:3e:fb:e4:35:b6:5d:b4:
         5d:e8:21:0d:da:3b:f6:fd:8c:d1:d5:85:24:79:d8:bc:6c:f3:
         99:56:28:e3:c9:0b:92:d6:3e:f6:d4:d7:d8:c2:8a:60:e6:33:
         b4:87:3e:64:a7:37:03:49:1e:2b:38:f3:6c:d9:4b:0b:d0:9a:
         36:72:d4:ed:c6:b4:cc:70:73:a1:f6:73:7a:73:24:a6:98:4c:
         a4:20:1f:ce:90:99:35:1c:d2:fe:0a:92:2a:99:93:5c:72:f7:
         24:4e:ff:68:6f:0c:7a:56:59:f1:7d:54:f4:2e:1d:e2:7c:08:
         2f:e6:f8:a1:bf:bd:62:89:bd:ed:e1:12:71:8f:2f:5b:5e:0b:
         ff:55:76:ca:81:de:6f:23:17:f4:e2:f8:e9:e6:4e:e4:bf:74:
         a8:e2:18:4b:aa:e6:a4:6e:b0:38:13:be:c7:13:ef:98:70:a9:
         a1:92:c4:cf:bf:f0:99:86:53:c3:8c:93:39:37:b6:d2:3b:a8:
         fa:3f:7a:f7:ef:86:8d:82:ad:bf:3a:80:0b:de:d0:cc:bd:a6:
         b3:bd:77:cd:14:e0:14:31:5a:21:70:22:24:02:c3:b0:0b:0e:
         07:51:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----